Amazon SAA-C03 Practice Test - Questions Answers, Page 90
Question list
List of questions
Related questions
A company hosts a database that runs on an Amazon RDS instance deployed to multiple Availability Zones. A periodic script negatively affects a critical application by querying the database. How can application performance be improved with minimal costs?
Add functionality to the script to identify the instance with the fewest active connections and query that instance.
Create a read replica of the database. Configure the script to query only the read replica.
Instruct the development team to manually export new entries at the end of the day.
Use Amazon ElastiCache to cache the common queries the script runs.
How can a company detect and notify security teams about PII in S3 buckets?
Use Amazon Macie. Create an EventBridge rule for SensitiveData findings and send an SNS notification.
Use Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SNS notification.
Use Amazon Macie. Create an EventBridge rule for SensitiveData:S3Object/Personal findings and send an SQS notification.
Use Amazon GuardDuty. Create an EventBridge rule for CRITICAL findings and send an SQS notification.
A company runs HPC workloads requiring high IOPS.
Which combination of steps will meet these requirements? (Select TWO)
Use Amazon EFS as a high-performance file system.
Use Amazon FSx for Lustre as a high-performance file system.
Create an Auto Scaling group of EC2 instances. Use Reserved Instances. Configure a spread placement group. Use AWS Batch for analytics.
Use Mountpoint for Amazon S3 as a high-performance file system.
Create an Auto Scaling group of EC2 instances. Use mixed instance types and a cluster placement group. Use Amazon EMR for analytics.
A company has developed an API using Amazon API Gateway REST API and AWS Lambd
a. How can latency be reduced for users worldwide?
Deploy the REST API as an edge-optimized API endpoint. Enable caching. Enable content encoding to compress data in transit.
Deploy the REST API as a Regional API endpoint. Enable caching. Enable content encoding to compress data in transit.
Deploy the REST API as an edge-optimized API endpoint. Enable caching. Configure reserved concurrency for Lambda functions.
Deploy the REST API as a Regional API endpoint. Enable caching. Configure reserved concurrency for Lambda functions.
How can a law firm make files publicly readable while preventing modifications or deletions until a specific future date?
Upload files to an Amazon S3 bucket configured for static website hosting. Grant read-only IAM permissions to any AWS principals.
Create an S3 bucket. Enable S3 Versioning. Use S3 Object Lock with a retention period. Create a CloudFront distribution. Use a bucket policy to restrict access.
Create an S3 bucket. Enable S3 Versioning. Configure an event trigger with AWS Lambda to restore modified objects from a private S3 bucket.
Upload files to an S3 bucket for static website hosting. Use S3 Object Lock with a retention period. Grant read-only IAM permissions.
A media company hosts a web application on AWS for uploading videos. Only authenticated users should upload within a specified time frame after authentication.
Which solution will meet these requirements with the LEAST operational overhead?
Configure the application to generate IAM temporary security credentials for authenticated users.
Create an AWS Lambda function that generates pre-signed URLs when a user authenticates.
Develop a custom authentication service that integrates with Amazon Cognito to control and log direct S3 bucket access through the application.
Use AWS Security Token Service (AWS STS) to assume a pre-defined IAM role that grants authenticated users temporary permissions to upload videos directly to the S3 bucket.
A company needs to ingest and analyze telemetry data from vehicles at scale for machine learning and reporting.
Which solution will meet these requirements?
Use Amazon Timestream for LiveAnalytics to store data points. Grant Amazon SageMaker permission to access the data. Use Amazon QuickSight to visualize the data.
Use Amazon DynamoDB to store data points. Use DynamoDB Connector to ingest data into Amazon EMR for processing. Use Amazon QuickSight to visualize the data.
Use Amazon Neptune to store data points. Use Amazon Kinesis Data Streams to ingest data into a Lambda function for processing. Use Amazon QuickSight to visualize the data.
Use Amazon Timestream for LiveAnalytics to store data points. Grant Amazon SageMaker permission to access the data. Use Amazon Athena to visualize the data.
A company runs an application on EC2 instances that need access to RDS credentials stored in AWS Secrets Manager.
Which solution meets this requirement?
Create an IAM role, and attach the role to each EC2 instance profile. Use an identity-based policy to grant the role access to the secret.
Create an IAM user, and attach the user to each EC2 instance profile. Use a resource-based policy to grant the user access to the secret.
Create a resource-based policy for the secret. Use EC2 Instance Connect to access the secret.
Create an identity-based policy for the secret. Grant direct access to the EC2 instances.
A company needs a cloud-based solution for backup, recovery, and archiving while retaining encryption key material control.
Which combination of solutions will meet these requirements? (Select TWO)
Create an AWS Key Management Service (AWS KMS) key without key material. Import the company's key material into the KMS key.
Create an AWS KMS encryption key that contains key material generated by AWS KMS.
Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Use S3 Bucket Keys with AWS KMS keys.
Store the data in an Amazon S3 Glacier storage class. Use server-side encryption with customer-provided keys (SSE-C).
Store the data in AWS Snowball devices. Use server-side encryption with AWS KMS keys (SSE-KMS).
A website uses EC2 instances with Auto Scaling and EFS. How can the company optimize costs?
Reconfigure the Auto Scaling group to set a desired number of instances. Turn off scheduled scaling.
Create a new launch template version that uses larger EC2 instances.
Reconfigure the Auto Scaling group to use a target tracking scaling policy.
Replace the EFS volume with instance store volumes.
Question